Experimental Quantum Communication without Shared Reference Frame 
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We present an experimental realization of a robust quantum communication scheme [Phys. Rev. 
Lett. 93, 0220501 (2004)] using pairs of photon entangled in polarization and time. The scheme 
overcomes errors due to collective rotation of the polarization modes (for example, birefringence in 
optical fiber or misalignment), is insensitive to phase's fluctuation of the interferometer and does 
not require precise timing. No shared reference frame is required except from the need to label the 
different photons. We use this scheme to implement a robust variation of the Bennett-Brassard 1984 
quantum key distribution protocol (BB84) over 1km of optical fiber. We conclude by discussing and 
solving the unconditional security of our protocol. 
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Quantum cryptography [l] , whose security is based on 
the fundamental principles of quantum mechanics, is a 
fast expanding field of quantum information both theo- 
retically and experimentally 0. Recently, many quan- 
tum key distribution (QKD) experiments have been re- 
alized through optical fiber and free space using weak- 
coherent source or entangled photon pairs. The maxi- 
mum distances of free space QKD using weak-coherent 
source and entangled photons are 23.4km by Kurtsiefer 
et al. Q and 13km by Peng et al. respectively. Their 
aim was to try to validate the feasibility of quantum com- 
munication with satellites. Despite some security flaws, 
fiber-based QKD over 100km has been achieved Q. 

Polarization and phase-time are most common cod- 
ing methods to implement QKD. Although polarization 
can be suitable for free space QKD, it is generally not 
suitable for fiber-based QKD because of the time and 
wavelength dependences of birefringence which will de- 
polarize the photons. Experimentally, active feedback or 
self-compensation could be applied to solve these prob- 
lems @, but it is efficient only when the thermal and 
mechanical fluctuations are rather slow. A popular alter- 
native to polarization coding is phase-time coding using 
unbalanced interferometers [3, Q. However, phase-time 
coding can be very sensitive to the phase's fluctuations 
between the two arms of the interferometers and requires 
thermal stability. Some ingenious tricks like two-way 
communication [9( are insensitive to phase's fluctuation, 
but have themselves disadvantages like being incompati- 
ble with perfect single photon sources and being sensitive 
to backscattering light. 

To overcome the problems mentioned above, Walton 
et al. proposed a scheme based on decoherence-free sub- 
space (DFS) which required encoding qubits using phase 
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and time entanglement between two photons [10| . Then 
Boileau et al. 11] proposed a variation of that proto- 
col that use a combination of time bins and polariza- 
tion modes for coding. These schemes are insensitive 
to phase's fluctuations of the interferometer and robust 
against collective rotation induced by birefringence or 
misalignment. In single photon QKD protocol, a pre- 
cisely synchronized clock is necessary to reduce the time 
window to minimize the contribution of dark counts. 
However, it is not the case for coding schemes using pho- 
ton pairs, because the photons simultaneously originating 
from the pair can provide precise time references for each 
other. The fact that no synchronized clock is necessary 
could be useful if the arrival time of photon fluctuates. 

The obvious disadvantages of two photon schemes are 
that they are much more sensitive to photon loss and 
seem more inefficient than the single photon schemes. 
However, it would be possible to reduce the qubit losses 
to a level comparable to single photon schemes by us- 
ing post-selection, entanglement swapping and quantum 
memory devices [12j. As a step forward in that direction, 
we implemented a variation of the BB84 protocol based 
on the robust scheme of Boileau et al. [1 ll ] , and realized 
an efficient quantum communication without any shared 
reference frame. 

Our experimental scheme is illustrated in Fig. [1] 
On Alice's side, polarization-entangled photon pairs are 
generated via type-II spontaneous parametric down- 
conversion (SPDC) The two photons of each pair are 
labelled by passing two arms with 1.8m length difference. 
In the long arm, two Pockel cells (POC1 and POC2), 
driven by high voltage pulse generators gated with ran- 
dom number signal, are used to produce the four states 
similar to that of BB84: \HV) + \VH), \HV) - \VH), 
\HV) + i\VH) and \HV) - i\VH), where H and V stand 
for horizontal and vertical polarization mode, respec- 
tively. 

The two entangled photons can be combined into the 
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FIG. 1: Experiment setup for robust QKD. A 400 mW Argon-ion 
laser beam (Ar~*~) of 351 nm passes through a 2 mm beta-barium- 
borate (BBO) crystal and produces polarization-entangled photon 
pairs of 702 nm. POC1-POC4 are four Pockel cells; BS1 and BS2 
are beam-splitters; PBS1-PBS6 are six polarized beam-splitters; 
FC1 and FC2 are two fiber couplers; HWP1 and HWP2 are two 
half- wave plates (HWP); a HWP inserting between two quarter- 
wave plates (QWP) constitutes a polarization rotator (PR); IF is 
a interference filter; D1-D4 are four single photon detectors. 



same path in the beam-splitter BS1 with a probabil- 
ity of 1/4. Afterward, the vertically polarized photons 
are firstly tagged with a delay T in an unbalanced in- 
terferometer composed of two polarizing beam-splitters 
(PBS1 and PBS2) with a 1.2m difference between the two 
pathes' length. The POC3 is added to perform a random 
collective rotation of polarization before the photons are 
collected into the fiber coupler (FC1). Then, the photons 
are sent to Bob directly or through a 1 km single mode 
optical fiber. A polarization rotator (PR) is used to sim- 
ulate the collective rotation noise. On Bob's side, the 
received horizontally polarized photons are tagged with 
the same delay T. To make the two timing tags exactly 
the same, a right-angled prism (Delay in Fig. [T|) is used 
to adjust the path length precisely. 

Using notation introduced in Ref. (Tlj and supposing 
that the initial state was of the form a\HV) + (3\VH), 
the resulting state can be written as: 

((<Si + \)/2){a\H' T V±) + f}\V^H' T )) 
+((<$! - l)/2){a\V'H' TT ) + (3\H' TT V')) 
+((& + 5 3 )/2){a\H' T H' TT ) + (3\H' TT H' T )) 
+ ((62 - 5 a )/2)(a\V'V+) + P\ViV% 

where \H') and \V') represent Bob's polarization basis 
frame which can be different from Alice's one. The sub- 
scripts T and TT mean that the photon has been tagged 
once and twice, respectively. The Sj's are parameters 
that depend directly on the collective rotation of the 
polarization mode. They satisfy the following relation: 
|<5i|| 2 + 1 1 $2 II 2 + I \h 1 1 2 = 1 • Giving the arrival time of 
the photons, the final state is projected to the original 
state with a probability p s = \\ 5l ^ 1 1| 2 . The p s could 
be anything between and 1. To make p s independent 
of the environment or any misalignment of the reference 
frame, Alice or Bob could apply a random unitary trans- 
formation B® 2 between the two tagging operations. If B 
is chosen from the uniform distribution over U(2), then 
p s is in average equal to -| whatever is the collective ro- 
tation. Because it's difficult to realize random transfor- 
mation B over the whole U (2) space experimentally, we 
simplify the experimental set-up by using only one POC 
(POC3 in Fig.l). Making it do nothing half of the time, 




FIG. 2: Interference pat- 
tern observed for the state 
\H! r V^) - \V±.H' T ) after apply- 
ing a Hadamard gate on each 
photon and by measuring the 
coincident counts. The zero de- 
lay position corresponds to the 
maximum interference visibility. 



and a bit-flip operation otherwise, p s could also average 
to a non-zero value, 4 ^ p s ^ ^. 

The received photons are split at BS2. The two 
half-wave plates HWP1 and HWP2 are set such that 
they performs as Hadamard gates on the polarization. 
By switching POC4 such that it do nothing or act as 
a QWP at 90°, we can select a random measurement 
basis (either {\H' T V^) + \V^H' T ), \H' T V^) - \V^H' T )} or 
the {\H' T V^) + i\V^H' T ), \H' T V^) - i\V^H' T )}). By post- 
selecting the cases where each of two photons exit from 
different outputs of BS2 and their arrival time differ- 
ence is 6ns (which is related to the 1.8m time label), the 
states are differentiated according to their polarization 
(the same or different) (TlJ. The detection events within 
the 3ns coincident time window are recorded to generate 
quantum key bits. 

For the measurement to succeed, it is crucial to observe 
two photons interference after the timing tags. It requires 
to match accurately the difference of the path's lengths of 
the two interferometers by adjusting the prism on Bob's 
side (see Fig. [I}. The curve in Fig. [5] shows an interfer- 
ence fringe with a visibility of above 95%. The fact that 
interference is observed over a large length interval (of 
about one hundred micrometers) clearly implies that the 
interference is robust against the phase instability of the 
interferometers as claimed in Ref. [ToL [IlT | . 

In order to demonstrate the robustness of the proto- 
col in principle, we first use a 4m optical fiber to im- 
plement the QKD protocol. Approximately 12, 000Hz 
polarization-entangled pairs are detected behind a inter- 
ference filter (IF) of 1.6nm FWHM. The entangled pho- 
ton pairs are transferred to one of the four states ran- 
domly and sent to Bob. Due to the photon losses in the 
BSs and the fiber connecters, only a maximum of 140Hz 
coincidences can be registered on Bob's side after cal- 
ibrating the PR. We then rotate the angle of the first 
QWP of the PR to simulate the degree of collective ro- 
tation noise. In the experiment, five settings are selected 
for particular angles of the QWP. The first setting cor- 
responds to the case where there is no collective rotation 
and coincidence is maximal. The last setting corresponds 
to a collective bit-flip. The other settings are chosen via 
rotating the angle of QWP with equal intervals between 
the best and the worst settings. We investigated the 
change of error rates and coincidences under these con- 
ditions with or without random rotation implemented by 
POC3. 

As shown in Fig. 3, the coincidence without random ro- 
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FIG. 3: Quantum bit error rates (QBER) measured under different 
collective rotations and with a 4m single mode fiber. The first 
collective rotation correspond to the identity and the fifth, to a bit- 
flip. The angles in between are chosen has described in the text. 
The QBER of each states was measured in 20 minutes without (a) 
or with random rotations (b). The average QBER over all states 
with and without the random rotations are compared in (c). In 
(d), we give the normalized coincidence counts in function of the 
angle of the collective rotation with or without random rotations. 

tation is very dependent of the collective noise. When the 
angle of rotation increases, the coincidence decreases to a 
minimum while the error rate increases close to 50%. As 
predicted, using random rotation makes the coincidence 
and the error rates much less dependent on the collective 
noise. We later show that the all the error rates obtained 
with the random rotations are suitable for secured QKD. 

We also constructed a practical QKD system over 1km 
single mode fiber, whose attenuation for each photon at 
702 nm is 4.8 db/km. Due to the photon loss in the 
fiber and an additional fiber connecter, the maximal co- 
incidence detected in Bob's side dramatically drops to 
1.4Hz. We measured the error rates under the same col- 
lective noise settings as used in the experiment with short 
fiber. The results of the experiment are shown in Fig. 4. 
Due to the photon loss, the QBER observed in the ex- 
periment is a bit higher than the cases with short fiber, 
but is still well below the lower bound for secure key 
distribution. 

In fact, the error rates are mostly come from the imper- 
fection of state preparation and accidental coincidence. 
The 2000 Hz single count rate of each detector and the 
3ns coincidence window lead to an accidental coincidence 
of 0.024Hz. When the collective noise changes, the ac- 
cidental coincidence will induce an error rate from 1.7% 
to 50% when no random rotation is applied. However, 
with the help of random rotation it will only cause an 
error rate varied from 3.4% to 6.8%, which is much more 
independent of the collective noise. The imperfect state 
source will also cause an error rate of 4% . The average 
error rate is observed to be 10.2% ± 0.3% (see Fig.4-c). 
The following security proof will show that our experi- 



FIG. 4: QBER measured under different collective rotations (as in 
Fig-CU an d with a 1km single mode fiber. The QBER of each states 
was measured in 3 hours without (a) or with random rotations (b). 
The average QBER over all states with and without the random 
rotations are compared in (c). In (d), we give the normalized co- 
incidence counts in function of the angle of the collective rotation 
with or without random rotations. 



mental method can successfully distribute quantum key 
over a practical collective noise channel without shared 
reference frame. 

It should be noted that our experimental measure- 
ments are not exactly the same as the ones required 
by the standard BB84 protocol. However, if Bob was 
able to do a projection into the space S spans by \H'Vj) 
and \V^H'), then both measurements would be identi- 
cal. Instead of doing this projection directly, suppose 
that, just before his tag operation, Bob apply on the po- 
larization modes of the photon pairs a random phase shift 

/ 1 \ ® 2 

= \ q e i<t> ) w ith chosen between 0, j, ir or 4^. 

Because of the post-selection, the only states that we 
need to consider are the ones of the form ai\H'V^) + 
a-^V^H') +a 3 \H'H') +ai\V^VJ r ) for some complex num- 
bers a,i. Consider the density matrix p of an arbitrary 
mixture of these states. Simple calculations show that 
the elements of p 1 = ^0=0 x -n 2s M^pM^ that corre- 
sponds to \V^){H'V^\, \WH')(H'V^\,\V^V+)(V^H'\, 
\H'H')(V^H'\ and their transposes vanish. In other 
word, sometime the state is projected into or outside 
5. In the first case, the measurement reduce to one of 
the two von Neumann measurement used in the stan- 
dard BB84. In the other case, the state may be pro- 
jected outside S and the measurement fails. If Alice and 
Bob were able to know exactly which pairs were pro- 
jected inside or outside S then they could reject those 
pairs that correspond to the wrong projection and could 
perform the standard BB84 protocol with the remain- 
ing pairs. However, they don't have this information. 
Instead, they can measure with a good accuracy the ra- 
tio of the states that are projected inside S, which we 



4 



refer to as p . This can be achieved by selecting a ran- 
dom sample of photon's pairs on which the measurement 
corresponding to {\H' T H' T ), \H^}, \V^H' T ), \V+V+}} is 
applied immediately after the tagging operation, and by 
counting the results corresponding to either \H' T V^) or 
\V^H' T ). If that sample is large enough, the measured 
ratio of states projected inside and outside S will be very 
close to p s . Remark that the number of pairs required 
for the measurement of p s is asymptotically negligible. 

To obtain a secure key, it is necessary and sufficient to 
bound Eve information about the key after bit error cor- 
rection since privacy amplification [Til [i~5| can be used 
to reduce asymptotically that information to zero with 
a key's lost proportional to Eve's information. For the 
qubits projected outside S, Alice and Bob assume the 
worst case scenario and suppose that Eve has full infor- 
mation about the results corresponding to these states. 
For the qubits projected inside S, Shor and Preskill's 
proof [16j bound Eve's information after bit error correc- 
tion by H(e^.). Consequently, the secret key generation 
rate is at least p s — H{e x ) — (ef ) of the conclusive re- 
sults. Note that, H is the Shannon entropy, e x and ef are 
the bit error rate over all conclusive results and over the 
conclusive results that were projected inside S, respec- 
tively. A conclusive result is defined as any measurement 
that gives a bit to the key before error correction and 
privacy amplification. 

Since both e x and p can be measured directly by using 
a sample of test bits, to estimate the secret key generation 
rate, Alice and Bob only need an upper bound for ef . ef 
can be estimated from the identity e x = p s e x + (l—p s )e x , 
where ef is the error rate of the conclusive results cor- 
responding to the states projected outside S. As a con- 
sequence of Bobs random choice of $ for M$ and the 
fact that the coefficients of the density matrix p' corre- 
sponding to \V£V^)(H'H'\a,nd \H'H'){V+V^\ are zeros, 



ef asymptotically. In the experiment, we measured p 
using the method explained above. In the case with 4 
m fiber, p s is measured to be 97% and in the case with 
1 km fiber p s is 91%. With the help of random rota- 
tions, the e^s observed in both cases (see Figs|3] and [4]) 
are sufficient to guarantee secure key distribution. 

Any coherent attack from an eavesdropper was con- 
sidered in our security analysis. However, we assumed 
perfect state preparation and measurements, and that 
Eve's has no access whatsoever to Alice and Bob's lab. 
For a more realistic security analysis, considerations as 
the ones treated in Ref. [13, HU would be necessary. 

In summary, we have realized one of the first efficient 
quantum communication protocols without shared spa- 
tial and reference frame including no time reference, ex- 
cept to label the qubits. It could be useful for free-space 
transmission in the case where the receiver and the sender 
are moving relative to each other. It could also be useful 
to avoid birefringence effect in optical fiber and would be 
a possible solution to the phase instability of interferom- 
eters. Our experiment is a first step toward more efficient 
robust quantum communication since it is only an exam- 
ple of a series of more complex quantum communication 
schemes exploiting the decoherence-free subsystem of the 
collective noise and time tags .We also showed the un- 
conditional security of a robust quantum key distribution 
protocol based of BB84. We conclude with the remarks 
that technological advances of entangled photon sources 
and quantum memories would greatly enhance our re- 
sults. 
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